IconBurst: NPM software supply chain attack grabs data from apps, websites

blog.reversinglabs.com